Description
Cross-site request forgery (CSRF) vulnerability in the WP Limit Posts Automatically plugin 0.7 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the lpa_post_letters parameter in the wp-limit-posts-automatically.php page to wp-admin/options-general.php.
References (2)
Core 2
Core References
Exploit x_refsource_misc
http://packetstormsecurity.com/files/129647/WordPress-WP-Limit-Posts-Automatically-0.7-CSRF-XSS.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/99427
Scores
EPSS
0.0101
EPSS Percentile
59.2%
Details
CWE
CWE-352
Status
published
Products (1)
wp_limit_posts_automatically_project/wp_limit_posts_automatically
< 0.7
Published
Dec 31, 2014
Tracked Since
Feb 18, 2026